$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa File: a45363ac-38b7-3765-9fd2-71955777f847.roa (raw, json) Hash identifier: 2PnsFTUCstAucAHqkAzz12ZEbonTIC+ZkqAU2xeMa/Q= Subject key identifier: 1A:8F:F2:46:8A:32:F9:B7:D1:5A:49:ED:A2:E6:C2:4F:81:A3:CF:56 Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584D9A2032E2069C3C9FE27A4E60 Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 401927 IP address blocks: 104.204.192.0/21 maxlen: 21 2604:1d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:32:e2:06:9c:3c:9f:e2:7a:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=18e8687f-883f-4a71-9cff-9a0f2f3a7b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:a7:99:ff:5d:9a:53:51:89:c4:58:91:3f: 3b:46:84:32:77:e5:97:59:84:48:24:74:e1:95:af: 05:c5:55:cd:57:de:14:93:91:45:e9:85:31:21:de: 82:40:67:43:fe:5e:d6:66:c4:e0:d8:e9:f2:b0:64: c9:3b:9a:4a:fa:6a:53:60:67:6f:1d:a3:5d:d8:1e: e0:9e:de:a9:10:57:38:3b:35:11:c1:03:51:50:fb: 30:3b:ab:7b:61:5d:29:eb:7d:85:60:fe:c4:44:c2: 9d:09:4e:84:ae:8b:03:d8:46:2c:91:d7:7e:42:25: 0a:fc:d1:8d:b9:26:ff:27:71:30:94:82:05:44:62: 8c:8a:5e:40:21:42:6b:84:8d:4d:ae:12:5d:b6:f3: fd:7d:cb:5c:5a:7d:3a:b9:b1:af:94:51:f6:87:0d: e4:7e:5e:fc:7b:16:87:22:52:2d:bd:65:b9:24:63: ec:a9:bc:da:9a:4d:41:db:b0:94:c6:01:ae:3b:a0: 08:8f:f2:cf:26:7e:c1:57:7d:31:bf:63:86:b7:2b: 53:36:72:92:ab:85:d7:56:25:31:e9:d4:65:36:1d: db:b5:45:1f:d9:58:69:be:d4:bb:4b:3e:14:6d:b1: b9:f8:1a:e5:43:ba:27:d6:31:af:60:19:83:47:24: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:F2:46:8A:32:F9:B7:D1:5A:49:ED:A2:E6:C2:4F:81:A3:CF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: 104.204.192.0/21 IPv6: 2604:1d20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c8:af:80:cd:31:bb:a8:6c:40:40:74:44:e0:ca:50:44:03: 57:6a:26:17:e8:c0:f8:a9:e1:8a:ef:3e:09:2c:84:26:07:c3: 7f:13:3d:04:b7:1c:9b:af:5e:67:5a:45:4f:ff:c4:ba:87:8c: ab:04:d6:9f:69:36:08:e0:14:99:95:78:32:7b:93:21:3a:bd: 1f:24:89:d2:4e:cf:d9:1a:12:7e:f5:43:80:49:72:8f:b4:1d: c1:f1:f2:74:d3:bc:4e:fe:7a:ec:5f:be:28:97:90:6e:cd:a4: ba:2a:ef:8f:6e:b3:4a:a7:79:43:01:45:b5:e8:c3:95:f8:ce: 16:ca:42:87:6a:77:a7:5f:6a:6e:6a:50:28:28:10:e1:7a:d7: 1b:bf:db:b9:15:98:d3:01:a0:5c:19:2c:18:0b:26:e5:e3:10: 3e:95:26:f4:9c:f9:4b:4c:26:ae:fc:fa:f0:ce:5a:84:55:87: 40:6c:1d:64:a1:3b:1f:fe:de:f1:3f:52:bc:c9:67:cd:1c:ee: 06:3f:c5:f6:b2:76:25:61:ab:e8:1e:92:c7:9b:8b:8e:05:ef: b9:ce:50:0a:7b:54:db:f0:fb:79:3d:a8:f7:7a:11:26:c1:2e: e1:01:7f:74:8d:d5:e9:6a:9e:09:2f:f9:b3:94:d6:25:bb:31: 6d:fc:2c:56 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE2aIDLiBpw8n+J6TmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MThlODY4N2YtODgzZi00YTcxLTljZmYtOWEwZjJmM2E3YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+inmf9dmlNRicRYkT87RoQyd+WXWYRIJHTh la8FxVXNV94Uk5FF6YUxId6CQGdD/l7WZsTg2OnysGTJO5pK+mpTYGdvHaNd2B7g nt6pEFc4OzURwQNRUPswO6t7YV0p632FYP7ERMKdCU6ErosD2EYskdd+QiUK/NGN uSb/J3EwlIIFRGKMil5AIUJrhI1NrhJdtvP9fctcWn06ubGvlFH2hw3kfl78exaH IlItvWW5JGPsqbzamk1B27CUxgGuO6AIj/LPJn7BV30xv2OGtytTNnKSq4XXViUx 6dRlNh3btUUf2VhpvtS7Sz4UbbG5+BrlQ7on1jGvYBmDRySWQwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBqP8kaKMvm30VpJ7aLmwk+Bo89WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvYTQ1MzYzYWMtMzhiNy0z NzY1LTlmZDItNzE5NTU3NzdmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaMzAMA0E AgACMAcDBQAmBB0gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHzIr4DNMbuobEBAdETgylBEA1dqJhfowPip 4YrvPgkshCYHw38TPQS3HJuvXmdaRU//xLqHjKsE1p9pNgjgFJmVeDJ7kyE6vR8k idJOz9kaEn71Q4BJco+0HcHx8nTTvE7+euxfviiXkG7NpLoq749us0qneUMBRbXo w5X4zhbKQodqd6dfam5qUCgoEOF61xu/27kVmNMBoFwZLBgLJuXjED6VJvSc+UtM Jq78+vDOWoRVh0BsHWShOx/+3vE/UrzJZ80c7gY/xfaydiVhq+geksebi44F77nO UAp7VNvw+3k9qPd6ESbBLuEBf3SN1elqngkv+bOU1iW7MW38LFY= -----END CERTIFICATE-----Generated at Wed May 13 12:34:25 2026 by rpki-client